Red Hat Security Advisory

RHSA-2013:0130

httpd security, bug fix, and enhancement update

Released 2013-01-08 · Red Hat rating Low · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) httpd-2.2.3-74.el5, httpd-2.2.3-74.el5.i386, httpd-2.2.3-74.el5.ia64 +13
Red Hat Enterprise Linux Desktop (v. 5 client) httpd-2.2.3-74.el5, httpd-2.2.3-74.el5.i386, mod_ssl-1:2.2.3-74.el5 +1
Red Hat Enterprise Linux Desktop Workstation (v. 5 client) httpd-2.2.3-74.el5, httpd-devel-2.2.3-74.el5, httpd-devel-2.2.3-74.el5.i386 +2

Fixes 3 records

TI-2008-00430 CVE-2008-0455 · GHSA-3rhp-x8rm-9rvr

Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP…

MEDIUM 56

Cross-site scripting (XSS) vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series a…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.64904 Published 2008-01-25 Partial fix CWE-79

TI-2012-02324 CVE-2012-2687 · GHSA-8v5x-5rvv-5j4v

Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in…

LOW 33

Multiple cross-site scripting (XSS) vulnerabilities in the make_variant_list function in mod_negotiation.c in the mod_negotiation module in the Apache HTTP Server 2.4.x before 2.4.3, when the MultiViews option is enabled…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.23091 Published 2012-08-22 Partial fix CWE-79

TI-2008-00431 CVE-2008-0456 · GHSA-fw9r-jq2r-wx56

CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server…

LOW 31

CRLF injection vulnerability in the mod_negotiation module in the Apache HTTP Server 2.2.6 and earlier in the 2.2.x series, 2.0.61 and earlier in the 2.0.x series, and 1.3.39 and earlier in the 1.3.x series allows remote…

CVSS 2.0LOW 2.6 Network No auth Interaction — EPSS 0.19036 Published 2008-01-25 Fixed CWE-74